This vulnerability involves a use-after-free condition in the Windows Kernel of Windows 10 Version 1607. An authorized local attacker can exploit this flaw to elevate their privileges, potentially gaining higher-level access than intended. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The attack vector requires local access with low complexity and no user interaction. Microsoft has released a patch to remediate this vulnerability.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially leading to full control over the affected system. The vulnerability impacts confidentiality, integrity, and availability of the system. There are no reports of active exploitation in the wild.

A patch is available from Microsoft to fix this vulnerability. It is recommended to apply the official update for Windows 10 Version 1607 (build 10.0.14393.0) as soon as possible to mitigate the risk. No additional mitigation steps are indicated by the vendor advisory.